CVE-2025-58718CWE-416

Remote Desktop Client Remote Code Execution Vulnerability

High · published October 14, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
47.8
In the wild
Unconfirmed
What it is

🚨 A sneaky use-after-free vulnerability in the Remote Desktop Client could let unauthorized attackers execute malicious code over the network! ⚡ Imagine a hotel where a guest leaves their keycard behind, allowing a stranger to stroll into their room and access everything inside. That's how this vulnerability works – it leaves the door wide open for mischief! An attacker could take full control of the victim's system, potentially stealing sensitive information or deploying malware. This is absolutely devastating for any organization relying on Remote Desktop services, as it opens the floodgates to a world of unauthorized access and chaos.

Put simply

Imagine a hotel where a guest leaves their keycard behind, allowing a stranger to stroll into their room and access everything inside. That's how this vulnerability works – it leaves the door wide open for mischief! This vulnerability arises from improper memory management, leading to a use-after-free condition that allows attackers to execute arbitrary code by leveraging crafted network requests.

What to do

An attacker could take full control of the victim's system, potentially stealing sensitive information or deploying malware. This is absolutely devastating for any organization relying on Remote Desktop services, as it opens the floodgates to a world of unauthorized access and chaos. Update the Remote Desktop Client to the latest version immediately to patch this vulnerability. Additionally, review your network security policies to limit exposure and monitor for unusual activity. Don't wait – the sooner you act, the safer you'll be! You've got this! With these steps, you'll be one step closer to securing your network and earning your security hero badge! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00596 · 47.8th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-14T17:01Z
EPSS history
Timeline
  • 14 OCT 17:01Z
    Remote Desktop Client Remote Code Execution Vulnerability
    cvelistv5